10315647768[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10315647768.zip
Size

4KB
MD5

8ba929cd2b156649e8ff7d95907d7c51
SHA1

45791672d09949dcf76ed94306d084a5596d28f8
SHA256

037e3c145eacfd4e03198928f3ee182fbdcf401eb4ad58ca108a239df2df39bc
SHA512

2be06e82e3f6e603b26c649050e7a4f9ae1cb46e3d6836ecb05fbb22651f526abff97b0f731605d9e8d53407c66a36e31a5e95a2c569cfbd543a9b2c9c65fd23
SSDEEP

96:yKZCzYIftvBgV191HJFaGNI2AVXjvMr3aVyZWMgpWcS4:3ZCsQDqxakDAVXjvMjLZdyWR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/75ef35db77c7238d5c1d9fd32a1698cd8d191ff6fbfe8044e1c4d196094c10bf

Files

10315647768.zip
.zip

Password: infected
75ef35db77c7238d5c1d9fd32a1698cd8d191ff6fbfe8044e1c4d196094c10bf
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ